MicroProfile® MicroProfile JWT Auth 3.0

Release Date
Deliverables

* org.eclipse.microprofile.jwt.JsonWebToken interface will have a new method for retrieving the token's headers, `jakarta.json.JsonObject getHeaders();`, https://github.com/eclipse/microprofile-jwt-auth/issues/327

* Remove optional MP JWT specification text and TCK tests: https://github.com/eclipse/microprofile-jwt-auth/issues/323

* Clarify that a `preferred_username` claim which can be used as a principal name is not unique: https://github.com/eclipse/microprofile-jwt-auth/issues/319

* Add a TCK test for the `mp.jwt.verify.clock.skew` property: https://github.com/eclipse/microprofile-jwt-auth/issues/314

* Require that the minimum RSA signing key size is 2048: https://github.com/eclipse/microprofile-jwt-auth/issues/142

Compatibility

While this release will remain binary compatible with the previous releases, the `Remove optional MP JWT specification text and TCK tests` and `Require that the minimum RSA signing key size is 2048` are major changes, with the last proposed change possibly requiring a migration effort